Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
File: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (raw, json)
Hash identifier: c6dr/6HXkwTPPaRGxAN+VVzNifnMfuejad4wfWK59uc=
Subject key identifier: BD:A9:0E:5E:3C:79:A3:6E:C1:0B:62:C5:51:88:73:58:38:0C:24:F3
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 35E8
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
Signing time: Wed 09 Sep 2026 08:32:44 +0000
ROA not before: Wed 09 Sep 2026 08:32:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7604
IP address blocks: 103.6.12.0/22 maxlen: 22
103.6.12.0/24 maxlen: 24
103.6.13.0/24 maxlen: 24
103.6.14.0/24 maxlen: 24
103.6.15.0/24 maxlen: 24
103.25.112.0/23 maxlen: 23
103.241.200.0/22 maxlen: 22
103.241.200.0/24 maxlen: 24
103.241.201.0/24 maxlen: 24
119.252.64.0/22 maxlen: 22
119.252.64.0/24 maxlen: 24
119.252.68.0/22 maxlen: 22
119.252.72.0/22 maxlen: 22
119.252.72.0/23 maxlen: 23
119.252.74.0/24 maxlen: 24
119.252.76.0/22 maxlen: 22
119.252.80.0/22 maxlen: 22
119.252.84.0/22 maxlen: 22
119.252.86.0/24 maxlen: 24
119.252.88.0/22 maxlen: 22
119.252.88.0/23 maxlen: 23
119.252.91.0/24 maxlen: 24
119.252.92.0/22 maxlen: 23
122.202.64.0/20 maxlen: 20
180.233.128.0/24 maxlen: 24
180.233.129.0/24 maxlen: 24
180.233.130.0/24 maxlen: 24
180.233.131.0/24 maxlen: 24
202.74.160.0/20 maxlen: 20
202.74.160.0/22 maxlen: 22
202.74.164.0/22 maxlen: 24
202.74.168.0/22 maxlen: 22
202.74.172.0/22 maxlen: 22
202.74.174.0/24 maxlen: 24
202.74.176.0/22 maxlen: 22
202.74.178.0/24 maxlen: 24
202.74.180.0/22 maxlen: 22
202.74.184.0/22 maxlen: 22
202.74.188.0/22 maxlen: 22
202.74.188.0/23 maxlen: 23
202.191.4.0/22 maxlen: 24
203.7.224.0/23 maxlen: 23
203.7.224.0/24 maxlen: 24
203.19.12.0/24 maxlen: 24
203.23.208.0/21 maxlen: 21
203.23.216.0/22 maxlen: 22
203.23.220.0/22 maxlen: 22
203.23.220.0/23 maxlen: 24
203.23.223.0/24 maxlen: 24
203.24.54.0/24 maxlen: 24
203.25.26.0/23 maxlen: 23
203.30.19.0/24 maxlen: 24
203.30.34.0/24 maxlen: 24
203.31.0.0/24 maxlen: 24
203.32.124.0/22 maxlen: 22
203.32.125.0/24 maxlen: 24
203.34.30.0/23 maxlen: 23
203.34.30.0/24 maxlen: 24
203.55.198.0/24 maxlen: 24
203.124.176.0/20 maxlen: 20
203.124.191.0/24 maxlen: 24
203.196.92.0/22 maxlen: 22
203.209.160.0/20 maxlen: 20
203.209.160.0/22 maxlen: 22
203.209.164.0/24 maxlen: 24
203.209.166.0/23 maxlen: 23
203.209.168.0/24 maxlen: 24
203.209.169.0/24 maxlen: 24
203.209.170.0/23 maxlen: 23
203.209.172.0/22 maxlen: 22
2401:400::/32 maxlen: 32
2401:401::/32 maxlen: 32
2401:402::/31 maxlen: 32
2403:3400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13800 (0x35e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: Sep 9 08:32:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa119ac-bff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:ec:2c:70:ed:af:a5:b3:68:ed:6b:ab:c1:
e3:8b:12:0f:de:05:51:68:de:b0:1e:3e:1f:78:ef:
36:fa:5f:f9:b8:9c:e3:f0:03:c5:79:ac:53:b2:06:
dd:47:8e:78:c1:86:56:5f:da:c5:08:19:b7:49:d8:
f7:c1:11:af:54:e7:5b:cb:e2:3e:e5:0a:22:a6:bb:
32:85:b3:89:e4:2d:82:87:ab:6d:f4:81:ff:1f:2c:
d8:3f:e4:47:29:02:17:ee:11:23:23:32:05:24:58:
77:8e:3c:ce:e5:7c:a0:75:aa:e9:f7:8d:13:f0:2c:
7b:48:e0:d5:16:c4:bf:7b:db:4c:6f:d0:a8:1d:a7:
2e:e1:9b:32:a9:b4:50:b0:14:ca:14:73:89:f1:15:
d0:dd:44:bb:e4:9a:5e:d8:ff:94:27:09:1c:6d:42:
b4:72:18:e1:18:74:3c:4e:b7:4f:e3:3e:a6:0d:46:
99:c9:2c:85:8c:1a:19:2b:64:bd:e8:c1:b4:c9:de:
c7:cb:f6:ae:2c:da:fd:bd:3f:80:b7:10:55:33:f1:
e8:fb:4f:c7:0b:9f:dd:10:bd:75:00:6a:93:0b:24:
8e:c3:84:55:a7:bd:2d:24:a3:99:4b:b9:ad:cf:18:
6b:1f:bc:54:38:a6:84:9d:c2:6f:58:bf:10:33:90:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A9:0E:5E:3C:79:A3:6E:C1:0B:62:C5:51:88:73:58:38:0C:24:F3
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.12.0/22
103.25.112.0/23
103.241.200.0/22
119.252.64.0/19
122.202.64.0/20
180.233.128.0/22
202.74.160.0/19
202.191.4.0/22
203.7.224.0/23
203.19.12.0/24
203.23.208.0/20
203.24.54.0/24
203.25.26.0/23
203.30.19.0/24
203.30.34.0/24
203.31.0.0/24
203.32.124.0/22
203.34.30.0/23
203.55.198.0/24
203.124.176.0/20
203.196.92.0/22
203.209.160.0/20
IPv6:
2401:400::/30
2403:3400::/32
Signature Algorithm: sha256WithRSAEncryption
53:c0:0b:b2:da:d6:91:6b:89:fe:8f:5d:89:51:98:3f:9e:c3:
63:7a:47:3b:f0:ec:37:3e:18:54:38:b0:2b:d4:b8:ba:21:01:
ba:28:07:52:0d:84:e1:c8:34:c7:84:e3:cf:f0:95:08:4a:17:
dd:98:ed:a7:5b:2a:9c:62:62:e4:de:db:ba:31:cc:b0:07:64:
3e:45:b5:47:7a:78:e9:67:71:0e:5b:f3:8c:af:9d:7f:ed:60:
e9:1c:99:54:97:27:57:64:66:c0:36:d0:60:5d:13:99:c3:e6:
74:52:06:e9:54:3c:7c:28:83:9a:01:26:24:7d:a5:2a:fd:2f:
6f:29:93:aa:07:92:69:80:79:0e:29:ed:3d:3e:c9:10:09:dd:
2e:7b:42:8c:56:1d:0e:4a:0e:4e:15:ad:79:0d:02:69:4a:92:
33:b4:bd:c3:83:3e:57:d8:97:25:7f:aa:47:5b:35:a5:0b:bb:
9f:34:de:60:fc:4d:75:9f:8f:b6:57:07:24:3c:65:d3:99:10:
10:0e:f0:06:e3:34:71:84:3f:e3:b1:20:44:d2:8f:fe:bd:fb:
0f:04:fd:a9:d2:d4:82:61:3e:1c:02:2d:5f:8f:3c:ed:73:8b:
bb:7a:b0:d8:4d:f0:46:c5:df:fe:10:1b:9f:bc:e4:23:ca:9c:
81:3b:77:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:24:06 2026 by rpki-client